Analysis

  • max time kernel
    143s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 18:36

General

  • Target

    95e01fe64821232f2be6939a99a99f88_JaffaCakes118.html

  • Size

    218KB

  • MD5

    95e01fe64821232f2be6939a99a99f88

  • SHA1

    797334051701424bffe5602f919441a21a28176a

  • SHA256

    3fd57c1f63c8778cc55c91a21c4007f48021fdac1bf9df3a9635109653359179

  • SHA512

    9a009daabf0bc85dffed890d4a5cbc95f112fe454c00fd3e00100bd6153c441c08fb63e882efc68edc8f85b11c40f5462d319c61e596837d7a4248baecfb297b

  • SSDEEP

    3072:SdX6dW9msSSyfkMY+BES09JXAnyrZalI+YQ:SdX6I9m1XsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\95e01fe64821232f2be6939a99a99f88_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2796 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31dfc27e1a61ccc0de3a2fcc355f58a2

    SHA1

    aba8d22bfe0b4bbc77ebfe7b8bb17f244ddab5d3

    SHA256

    f9e0877dde9555e2281d1bbdd00d92d7ec361d468b3f30756f76fd16328332d2

    SHA512

    1cf452b3819d25cf4ab8d3eb3d1b3bde11e7e9682aceec999115c32484079ec71b7de61d1578e2bc9d545a87d49a56820fa7883a3db34208e719f69334dae154

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dab967681c4fdc6c4509d68e565a467

    SHA1

    229df4b133b4de7a5c80ce69bcfa8ae931e40b17

    SHA256

    90ff745f24fdddf9b58df908e182465cd149ea416687d0fda45262a73ab59b5a

    SHA512

    12702c3bcab07b20779aed3dfff72b1ae1338468c05569fc7d601eb60dd1d0ec752f5852c0ed7cc643e6d856131cc5cda525322d55a566ce311d5dbe4d277094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19048ad00a46e4abcc4a847d687e9d56

    SHA1

    5400799fb8d9842e508c92ea99d72e688d18b1a9

    SHA256

    c17c51581e2f3c43fde44ad865281fb488c89d0dd131b46022857b7424caa11d

    SHA512

    c43142cfc0cc8ac29fbc7b63ce7f5b01174d93d71e40ba020c6d569bc498f2b3c36d302be1a04246e65253bec713b8943d6c2eb6bad2dc9c02b8467ea2850bfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f43c1ce902606ff8fb08a948f122c5d2

    SHA1

    f018f144373a9838f1a61ebf78580315c175697a

    SHA256

    a9bf3b7e12c7c9e6894fe49aad20d67de3e5048637334e699701c1562c57bbfb

    SHA512

    122877dfb8d05298ba990a05c5c93368f6f86da7ba8f88b404c6574e8b06ba1a92991f769289f9748c8bee931f447c8586996ef1b939a35ad6f23281e0ed4e05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60aff6f27a2abb24e4fb404b325ba8fd

    SHA1

    f79d7a321837c0b7233c931231393cc41f6add2a

    SHA256

    39c0f19891e968fe298ce7789d2e697d658120d7f4d9abcef1d6d04430078ede

    SHA512

    c7c0fcda54f7cdc3057c9fb0b75e88396ba7a5f01deaebfd5d2dfa6316bbf98b6a01f5f948b547f06cf830980e4ca0cacd8be6597b17775257eb42f49874aba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73ba0d13b5d9339f9d0681df05da7b38

    SHA1

    dbb64cf45c1f4c10bfb5778a61d26c8fdd3f4853

    SHA256

    2e5c02d8982b13738fb2ff222490e9ccf85d6bd8ad895995267065b7cd7d9d3c

    SHA512

    5cdbc4b25c8330584a43a8fc0b4c3b3337906a32a49fbaf46b4695957ca86789289db4b3e7f8fd50e1ba1544b67b845e58d3edfe20b148ea4224dc63445d1121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80bce784ce552a75a522de9cdacd65c1

    SHA1

    9bfad2a7103bb408798d48cac73802a896852a79

    SHA256

    17fc1eaaa89156bc18a1cf710c9f9c5df7a39dd2cb04380c16091023a5e5aa59

    SHA512

    635e6add875385b2d3e41587953d289a67e3a61d2fec6c05db111b81aace72dfea2c1ac54a4fde31fcffbe789ddf76fbb0fc30493f88329213314f3f1f83dc03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d02ea764792589d774041cb350bfafcd

    SHA1

    60f6583cf267bea47e05b4e1fead880501b3327f

    SHA256

    8d76959dbc634b6fbff95ac499e949e6b10c9336374d60b779f573f42cf0b23d

    SHA512

    0e8c87e45f8803ef91f07def8ac7d79325072d71360139ee5ffd4a90e27e84170c189806592c112f4898e26d9038a8d75267109c6a30999b8a653d84a360fbc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42a699d6ebccc5e5df6f81430033e3dc

    SHA1

    f2e4b4a0abb6ef05eea2cf96eda44d8827bb808b

    SHA256

    a14536675b573fd8feb6d25e1502997d5eecd5cc78e8eb6b797c9e24889ad668

    SHA512

    1bece86a511fc51e716c112afefb6e6788b1dea82019292fb950efad0b3311ef92363805e7c3c4947253ecc5525eea80b769191bd766b3a0317f926304a4ef1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    724e5fca1cac813d9aa7138a13d94081

    SHA1

    09803a15f2aeff2d07781c9cdcd3f258b55e63e2

    SHA256

    840f88d3b4d9572f09b06e47615e3128d5b2566909d67ebd83a1aab053dbf80f

    SHA512

    8d862983af8ad44418a305d524d8453e82c5af2ab700c1dfbd6913f6e2fa1905704baabc06d3317d4340010947662638f8c6832d48f943d4ee66c16ed364df27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea67f82ae396fc7672cc877483c55315

    SHA1

    0adbafc5a2e341278218382a6c061f0df8954722

    SHA256

    a595e163d93849b0c86ef0df58e309e87c2c49e902d96794dc56c8263acaad59

    SHA512

    36fc50a36adbf66dcf472baf1fe2e6bdb3500c55a1240201ecb4eaa698962bd54918a296d6a166b9f0899f5c3cca0cd7cdde0e3ff9195c49d40821f85ad3ef78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    635218b9d2e7f37938b15b76afd3c53c

    SHA1

    923236b9e203a5c239803952558d110fe2bd0660

    SHA256

    2e6e7877b229b9d6aef6ef7fade7d965448f560dad501099cb7c5647d0410fca

    SHA512

    58d630c0a978744056adf7276727603030fa01d29f112230b4c26426ef2760749b60d3ab7774831d42710d02c330031359e182fc8bfce1cc66182f0d2729277f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c2edb60bbdf349b3f4ad7e5b3e24c8d

    SHA1

    fbe115208c3921f03ae837d44cdde428382c37ae

    SHA256

    4cb7fa6762173b30247043e9b6150b4f50aafdb20da4070374f079f385755aa7

    SHA512

    c8fef604e0dad7cdd47187b25e9c91e02c0b0e0232930012b45cc129c338b619ef8f20b95d9d04928bbf4526b5202355c9c074ea2cc245eb380905f05fb1ee7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e712cd124f4e0fcafeb9333a1354465

    SHA1

    e4ad8e5bcf68c159eca2f0259e186e1c586490b4

    SHA256

    ad0013fdd9bb66d8d7a6c50eaf3a65eb5522c17c3e713ca0a70136462d1088db

    SHA512

    16c839f9e7604b95e6b9e1adbc3d5fe6b07daff5c7b02440dd9c99611749254eec2159dc0d5f13c08e637cf71b84af1a57390ccfb820641ed8ed1ba1203c2efe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e339866f11092dc070873fa4442ae213

    SHA1

    06ccc4e18673a6660c38d6e213e800b588754594

    SHA256

    abdceab18589651947427489776aa25725b64271244479d3fb4dd86b6df4b759

    SHA512

    b7466f53988cb7c07b15838197fff4145e3fd2bb01a1d67419e5e650e6bb341b93393dead47029bbd8f33e37c650cb1d8990b8fe3f434cf48ad1a3dd0adf887e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3daa2cd705d3d427e3d03c86dc2ff11b

    SHA1

    00dfb53e133467ec81cb31c556708b2fe8ef223f

    SHA256

    041366fe63d116253db060a279cdb919e5d6f9b7ee83a4460a2f756a9ab2a0c2

    SHA512

    b44bdfff311f7a677395a8ddc4375eae6a237e18d966e9498fff9310032d51e1f66087a97a3c3063359876e1a2587d92574d33bcfa7ff13507ae3509dc4909d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    116a2c913e12f0ad82275ed47a0fdd98

    SHA1

    a729ed8828e4c0b8c69c4d93339f23fd7e94b542

    SHA256

    86128a068879ef1a7ce37f429292b7b5f4494bb848ccbe94cdb8ae20d7800ebf

    SHA512

    d17114ca297df254616a1a660f6cc05a6b1deaa66bdbf75002dad3cd464cc74178873c75c887e492a63ea68e101b1b055634aaa0dc8a0e570a7231af6249860d

  • C:\Users\Admin\AppData\Local\Temp\Cab190C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar19F0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b